Microsoft Entra ID SCIM: Synchronize users and groups to Flexopus

What is Microsoft Entra ID SCIM synchronization?

SCIM stands for "System for Cross-domain Identity Management" – an open standard for the automated management of user identities across different applications. Microsoft Entra ID (formerly Azure Active Directory) supports this standard and can be directly connected to Flexopus via the Flexopus SCIM API.

Once the connection is established, Entra ID automatically transfers user profiles and attributes (e.g., Name, department, job title) as well as group assignments to Flexopus. Changes to the Identity Provider are usually applied to Flexopus within 40 minutes.

What is the purpose of integration?

The Entra ID SCIM integration fully automates user and group management in Flexopus. Typical use cases include:

• Onboarding new employees: When a new employee is added to a group in Entra ID, their profile is automatically created in Flexopus – even before their first login.
• Archive departing employees: If a user is deactivated in Entra ID or removed from the group, the account in Flexopus is automatically deactivated. No manual effort, no forgotten accounts.
• Manage groups centrally: Groups from Entra ID are transferred to Flexopus as read-only groups. Your identity provider remains the only source of truth.
• Keep profile data up to date: Changes to user profiles (e.g. Name changes, department changes) are automatically transferred to Flexopus – without admins having to intervene manually.

How easy is the integration?

Setup is done via the Azure portal and the Flexopus Admin dashboard. Essentially, the SCIM API URL and a token from Flexopus are entered into the Entra ID Provisioning settings. Next, you configure which groups should be synchronized – and the synchronization runs fully automatically in the background.

Ready to start? For complete step-by-step setup instructions, please visit our Help Center.

What are the advantages of integration?

• Fully automatic synchronization: User profiles and groups are transferred automatically – changes from Entra ID are usually visible in Flexopus within 40 minutes.
• No manual effort required: New employees are automatically created, departing employees are automatically deactivated. IT administrators save time and avoid errors caused by manual data maintenance.
• Central user management: Entra ID remains the sole source of truth. Groups and users only need to be maintained in one place.
• Data minimization: Only the attributes that Flexopus actually needs are transferred. Unnecessary data will not be shared.
• Increased security: If an employee is deactivated in Entra ID, they automatically lose access to Flexopus – no risk from forgotten accounts.
• Included free of charge: SCIM integration is part of Flexopus and does not require an additional license.
• Support for additional attributes: In addition to standard fields, individual attributes such as cost centers or extension attributes can also be synchronized.